v1.0.2 - WordPress.org Review Fixes
This release addresses all initial feedback from the WordPress.org plugin review team, aligning the plugin with modern coding standards, translation practices, and security guardrails.
Key Changes in this Release
- Security Updates: Added defense-in-depth direct file access checks (
ABSPATH) to all PHP files and added capability checks (manage_options) to admin options page rendering. - Dynamic Styling Optimization: Refactored dynamic custom CSS generation to use the standard WordPress function
wp_add_inline_style()instead of manual stylesheet outputs inwp_head. - Modernized Translations: Cleaned up translation loading by removing the deprecated manual
load_plugin_textdomain()calls, deferring translation tasks to the modern WordPress.org automated translation engine. - HTML Support in Banner Message: Enhanced the public cookie banner template to use
wp_kses_post()instead ofesc_html(), allowing website administrators to safely insert links (e.g., privacy policy pages) in the banner message. - Disclosure: Added an
== External Services ==section inreadme.txtto clearly document that script matching patterns (e.g., Google Analytics, Facebook Pixel) are used solely to block them on the client side until consent is granted.